neverallow fsck_untrusted {
 efs_block_device
}:blk_file no_rw_file_perms;
